Is there a way to use command line to add a hardware device exception and then add it to a policy?
There is not. It's manual entry in the SEPM.
Boo, ok thank you